【OLK-5.10】syzkaller环境出现Kernel BUG at timer_wait_running问题

Kernel BUG at timer_wait_running+0x66/0xcd usr/src/debug/linux-hydrogen/5.10/linux-5.10/kernel/time/posix-timers.c:849
------------[ cut here ]------------
WARNING: CPU: 0 PID: 1701 at timer_wait_running+0x66/0xcd usr/src/debug/linux-hydrogen/5.10/linux-5.10/kernel/time/posix-timers.c:849
Modules linked in: 8021q ping(O) pramdisk(O) usb_storage no_watchdog(O) igb(O) i2c_algo_bit(O) rsm(O) rtos_kbox_panic(O) zram zsmalloc lz4 lz4_compress dm_verity dm_bufio dm_mod bridge ipv6 stp llc ipt_REJECT iptable_raw iptable_filter iptable_mangle ata_piix ahci libahci libata ext4 jbd2 lzo lzo_decompress lzo_compress zlib_deflate mtd ptp pps_core nfsd auth_rpcgss nfsv3 nfs nfs_acl lockd sunrpc grace nfs_ssc vfat fat quota_v2 quota_v1 quota_tree load_kallsyms(O) uart_suspend(O) 8250 8250_base serial_mctrl_gpio serial_core_and_suspend [last unloaded: rsm]
CPU: 0 PID: 1701 Comm: syz-executor Tainted: G O 5.10.0 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.11.1-0-g0551a4be2c-prebuilt.qemu-project.org 04/01/2014
RIP: 0010:timer_wait_running+0x66/0xcd usr/src/debug/linux-hydrogen/5.10/linux-5.10/kernel/time/posix-timers.c:849
Code: e8 d6 7b 19 00 49 8b 75 00 49 8d 7c 24 20 e8 e5 ba a7 00 48 8d 7b 78 e8 bf 7b 19 00 48 8b 5b 78 48 85 db 75 09 e8 e3 4d 06 00 <0f> 0b eb 3d e8 da 4d 06 00 8b 43 fc 3d 59 ff bb 15 75 0a 4c 89 e7
RSP: 0018:ffff88814cd77d00 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff811929d2
RDX: ffff8881c63e0040 RSI: ffffffff811929e0 RDI: ffffffff82280178
RBP: ffff88814cd77d20 R08: 0000000000000007 R09: ffff8881148a7a2f
R10: 0000000000000001 R11: ffffed1022914f45 R12: ffff888117609b80
R13: ffff88814cd77d68 R14: 0000000000000002 R15: ffffffff81198144
FS: 00007fe880361640(0000) GS:ffff888201000000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fe87ef03e38 CR3: 000000011269e004 CR4: 0000000000060ef0
Call Trace:
 do_timer_settime+0x1fa/0x23e usr/src/debug/linux-hydrogen/5.10/linux-5.10/kernel/time/posix-timers.c:929
 __do_sys_timer_settime usr/src/debug/linux-hydrogen/5.10/linux-5.10/kernel/time/posix-timers.c:952 [inline]
 __se_sys_timer_settime+0x102/0x190 usr/src/debug/linux-hydrogen/5.10/linux-5.10/kernel/time/posix-timers.c:938
 __x64_sys_timer_settime+0x55/0x66 usr/src/debug/linux-hydrogen/5.10/linux-5.10/kernel/time/posix-timers.c:938
 do_syscall_64+0x43/0x81 usr/src/debug/linux-hydrogen/5.10/linux-5.10/arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x61/0xc6
RIP: 0033:0x7fe88020c0f9
Code: ff 8b 44 24 0c 48 83 c4 10 5b c3 66 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ff 0c 0f 00 f7 d8 64 89 01 48
RSP: 002b:00007fe880360ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000df
RAX: ffffffffffffffda RBX: 000056231ad1f050 RCX: 00007fe88020c0f9
RDX: 0000000020000140 RSI: 0000000000000001 RDI: 0000000000000002
RBP: 000056231ac87ca2 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fe880361640 R14: 000000000000006e R15: 0000000000021000
---[ end trace e5324ce6b7669025 ]---

【严重程度】 一般
【特性】 timer/timer
【重现类型】 有条件必然重现
【定位分析】 posix_timer设置时间时如果timer handler正在执行，会调timer_wait_running()等待Handler执行完成，但posix cpu timer未实现timer_wait_running call back，导致报了WARN_ON

Hi ***zhixiuzhou***, welcome to the openEuler Community.
I'm the Bot here serving you. You can find the instructions on how to interact with me at **[Here](https://gitee.com/openeuler/community/blob/master/en/sig-infrastructure/command.md)**.
If you have any questions, please contact the SIG: [Kernel](https://gitee.com/openeuler/community/tree/master/sig/Kernel), and any of the maintainers: @yangyingliang , @gatieme , @jiaoff , @LiuYongQiang0816 , @wangxiongfeng , @kevinzhu1 , @jentlestea , @lujialin2 , @xukuohai , @lengchao , @alvin-ling , @yuzenghui , @juntianlinux , @chenguangli , @gasonchen , @whoisxxx , @koulihong , @kailiu42 , @hanjun-guo , @woqidaideshi , @chiqijun , @wkfxxx , @thundertown , @guohaocs2c , @kylin-mayukun , @oskernel0719 , @liuxinux , @newbeats , @zhujianwei001 , @zhenpengzheng , @SuperSix173 , @colyli , @zhangyi089 , @htforge , @yuehaibing_planb , @haochengxie , @guzitao , @CTC-XiboWang , @Hongchen_Zhang , @chenwei_kernel , @x56Jason , @gouhao2022 , @duanqiangwen , @georgeguo , @mao-hongbo , @allen-shi , @zhangjialin11 , @stkid , @hellotcc , @hunan4222 , @kongzizaixian , @LiYihang226 , @young1c , @hucz , @wangboe2022 , @chenke1978 , @JerryHZ , @youngersun , @wsoydl , @sanglipeng , @zhang-changzhong , @jimmy_hero , @ygn-ndwd-official , @xiexiuqi , @zhengzengkai

Commit f7abf14f0001 ("posix-cpu-timers: Implement the missing timer_wait_running callback")
主线补丁能解决该问题，但主线补丁引入了较大kabi变更，自研补丁通过cond_resched()实现.timer_wait_running_call回调来解决该问题

GVP openEuler/kernel

内容风险标识

评论 (2)

GVPopenEuler/kernel

内容风险标识